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A method is disclosed for providing user access control for a plurality 
of resource objects within a distributed data processing system having a 
plurality of resource managers. A reference monitor service is estabhshed 
and a plurality of access control profiles are stored therein. Thereafter, 
selected access control profiles are exchanged between the reference monitor 
service and a resource manager in response to an attempted access of a 
particular resource object controlled by that resource manager. The resource 
manager may then control access to the resource object by utilizing the 
exchanged access control profile. In a preferred embodiment of the present 
invention, each access control profile may include access control information 
relating to a selected user; a selected resource object; a selected group of 
users; a selected set of resource objects; or, a predetermined set of resource 
objects and a selected gi-oup of users. 
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